Certificate

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/D2573E9C1203B37002430036F22CF52F5EE4CC89.cer
File:                     D2573E9C1203B37002430036F22CF52F5EE4CC89.cer (raw, json)
Hash identifier:          Yqg9dt2L5YfQSHyimvoEhbPNmHdd8Pv5lJQY5OebL88=
Subject key identifier:   D2:57:3E:9C:12:03:B3:70:02:43:00:36:F2:2C:F5:2F:5E:E4:CC:89
Authority key identifier: 2A:33:6D:BE:E8:C9:0A:3D:94:70:5F:D3:F3:0E:AB:62:D6:58:DC:52
Certificate issuer:       /CN=15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd
Certificate serial:       1D2782CAFA00A621863847F06448B893DE15C6FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0dd8489b-dbf7-4ec2-9f46-5f1498cad40c/15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd.cer
Manifest:                 rsync://testbed.rpki.nlnetlabs.nl/repo/Test/0/D2573E9C1203B37002430036F22CF52F5EE4CC89.mft
caRepository:             rsync://testbed.rpki.nlnetlabs.nl/repo/Test/0/
Notify URL:               https://testbed.rpki.nlnetlabs.nl/rrdp/notification.xml
Certificate not before:   Mon 14 Feb 2022 17:50:42 +0000
Certificate not after:    Mon 13 Feb 2023 17:55:42 +0000
Subordinate resources:    IP: 2605:1c00:ff0::/44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:27:82:ca:fa:00:a6:21:86:38:47:f0:64:48:b8:93:de:15:c6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd
        Validity
            Not Before: Feb 14 17:50:42 2022 GMT
            Not After : Feb 13 17:55:42 2023 GMT
        Subject: CN=D2573E9C1203B37002430036F22CF52F5EE4CC89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:64:4f:de:af:c8:e7:60:49:9a:1b:0f:90:
                    e1:4a:53:62:ab:a3:a8:f7:0e:0a:e0:ed:f3:1f:ff:
                    4b:bb:33:75:c6:72:38:30:e9:a7:64:e4:83:f0:3e:
                    2f:27:d8:41:83:9d:62:c7:eb:21:3c:f8:59:9a:c9:
                    46:b8:7d:69:65:18:e0:63:83:06:2b:4e:ca:39:13:
                    c1:8a:47:11:a9:92:76:7f:e7:c1:1d:be:64:ef:92:
                    3f:cf:60:74:d7:04:51:90:79:02:5f:00:0f:f3:15:
                    68:b8:4d:20:a3:7d:c4:03:a4:61:a1:03:2c:ad:05:
                    7b:df:5e:47:36:94:4a:2c:a8:f0:6f:11:db:90:88:
                    b1:cd:f9:0f:7f:da:34:7b:9a:85:b3:b0:75:93:3d:
                    c2:1f:82:21:83:68:0e:fc:58:4d:06:93:be:d1:ed:
                    c6:99:cd:59:13:15:a5:86:08:82:6d:ca:d6:bc:1d:
                    0b:e9:09:ec:7e:be:10:2a:fc:be:ed:38:9b:bf:ac:
                    7a:71:70:c5:04:ab:c4:5e:65:52:ce:be:3d:73:a7:
                    2b:a8:ca:85:0e:d2:f5:76:06:99:93:c0:2e:bd:fe:
                    04:d7:fd:a3:f4:44:0c:69:e3:20:77:2b:11:b0:18:
                    a3:8f:c1:8c:7e:c5:fa:3a:33:5b:c5:25:c4:b8:3b:
                    20:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:57:3E:9C:12:03:B3:70:02:43:00:36:F2:2C:F5:2F:5E:E4:CC:89
            X509v3 Authority Key Identifier:
                keyid:2A:33:6D:BE:E8:C9:0A:3D:94:70:5F:D3:F3:0E:AB:62:D6:58:DC:52

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7ea822b7017eb765e4944058/0/2A336DBEE8C90A3D94705FD3F30EAB62D658DC52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0dd8489b-dbf7-4ec2-9f46-5f1498cad40c/15151ee44ceeb27f78366d23de96881d205173dc045b61f1cd.cer

            Subject Information Access:
                CA Repository - URI:rsync://testbed.rpki.nlnetlabs.nl/repo/Test/0
                RPKI Manifest - URI:rsync://testbed.rpki.nlnetlabs.nl/repo/Test/0/D2573E9C1203B37002430036F22CF52F5EE4CC89.mft
                RPKI Notify - URI:https://testbed.rpki.nlnetlabs.nl/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:1c00:ff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:72:d6:05:55:54:e4:74:c3:2e:9b:62:65:03:f7:c1:86:2b:
         8c:bc:9b:75:5f:44:47:97:63:ff:ec:5f:53:24:5d:f2:b6:eb:
         96:fe:1c:c1:bf:d4:72:c5:db:c7:5b:01:af:fd:5f:ad:ef:2a:
         dc:bc:0b:c3:7f:e7:f4:bb:f3:56:a7:0e:77:d8:98:47:76:8f:
         0b:dc:14:d8:b9:63:21:51:fd:74:04:9b:3e:04:ca:38:14:45:
         cd:dd:13:80:e9:b0:18:b4:8a:3d:d3:66:0e:35:98:ae:ba:17:
         da:1b:f1:46:65:5c:94:1c:d5:65:1e:ee:c8:10:2e:23:6d:72:
         cc:f1:7a:16:1f:36:71:20:07:de:f5:97:75:11:fa:15:25:46:
         81:a4:9f:1e:fe:ec:3b:d0:e8:a1:58:7b:c5:b8:16:bb:23:b9:
         fb:55:37:79:a7:36:40:b7:85:8c:26:0b:61:b1:20:0b:e8:62:
         ef:db:76:68:04:f7:6c:30:25:c3:94:9c:54:c0:38:f3:80:0a:
         c3:0d:26:f1:6f:6d:a2:96:e7:ad:a6:57:19:2c:60:7d:77:2d:
         82:47:47:cd:7d:02:10:f9:89:ac:9d:b9:92:68:13:3d:15:7d:
         fc:fc:47:c3:91:d5:82:98:c9:b8:03:b3:05:c7:ae:46:84:4e:
         ef:eb:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:13:29 2025 by rpki-client